Every change Wellknown observed on this MCP server, newest first, with what it was before and what it became. Tool-surface changes carry the definition diff. Nothing here is edited after the fact.
Added "tide_doctor" and "tide_scaffold"; changed the definition of "tide_blast_radius", "tide_canon", "tide_dpop_asset" and 9 more (20 tools before, 22 now)
{"$schema":"http://json-schema.org/draft-07/schema#","additionalProperties":false,"properties":{"part":{"description":"Which part to return when the document is delivered in several parts. Omit for part 1; the response says how many there are.","minimum":1,"type":"integer"}},"type":"object"}
⟨31 unchanged words⟩ , verifiable-claims, version-policy","type":"string"},"part":{"description":"Which part to return when the document is delivered in several parts. Omit for part 1; the response says how many there are.","minimum":1,"type":"integer"},"section":{"description":"Return only the section(s) whose heading contains this text, e.g. 'AP-62' or 'T-26'. Use it when another document points you at one entry.","type":"string"}},"required":["name"],"type":"object"}
Returns theCONTENTSexactofcommand that installs `public/tide_dpop_auth.html` — the DPoP relay page the Tide ⟨10 unchanged words⟩ next.config.ts rewrite/CSP wiring, and how to verify.The file is NOT shipped`@tidecloak/js`inships the@tidecloak/* npmfilepackagesfromand0.14.34;isolderNOTSDKsinand the TideCloak container,so there is nowhere else to get it: without this
{"$schema":"http://json-schema.org/draft-07/schema#","additionalProperties":false,"properties":{"part":{"description":"Which part to return when the document is delivered in several parts. Omit for part 1; the response says how many there are.","minimum":1,"type":"integer"}},"type":"object"}
{"$schema":"http://json-schema.org/draft-07/schema#","additionalProperties":false,"properties":{"part":{"description":"Which part to return when the document is delivered in several parts. Omit for part 1; the response says how many there are.","minimum":1,"type":"integer"}},"type":"object"}
⟨28 unchanged words⟩ , start-tidecloak-dev, verify-jwt-server-side","type":"string"},"part":{"description":"Which part to return when the document is delivered in several parts. Omit for part 1; the response says how many there are.","minimum":1,"type":"integer"}},"required":["name"],"type":"object"}
⟨6 unchanged words⟩ name":{"description":"Scenario name. Available: attestation, attested-provenance-registry, encrypted-communication, git-pr-signing-service, iga-admin-governance, organisation-password-manager, policy-governed-signing, relationship-attestation","type":"string"},"part":{"description":"Which part to return when the document is delivered in several parts. Omit for part 1; the response says how many there are.","minimum":1,"type":"integer"}},"required":["name"],"type":"object"}
⟨6 unchanged words⟩ name":{"description":"Scenario name. Available: attestation, attested-provenance-registry, encrypted-communication, git-pr-signing-service, iga-admin-governance, organisation-password-manager, policy-governed-signing, relationship-attestation","type":"string"}},"required": ⟨3 unchanged words⟩
⟨6 unchanged words⟩ name":{"description":"Scenario name. Available: attestation, attested-provenance-registry, encrypted-communication, git-pr-signing-service, iga-admin-governance, organisation-password-manager, policy-governed-signing, relationship-attestation","type":"string"}},"required": ⟨3 unchanged words⟩
⟨6 unchanged words⟩ name":{"description":"Scenario name. Available: attestation, attested-provenance-registry, encrypted-communication, git-pr-signing-service, iga-admin-governance, organisation-password-manager, policy-governed-signing, relationship-attestation","type":"string"}},"required": ⟨3 unchanged words⟩
⟨27 unchanged words⟩ Defaults to true.","type":"boolean"},"part":{"description":"Which part to return when the document is delivered in several parts. Omit for part 1; the response says how many there are.","minimum":1,"type":"integer"}},"type":"object"}
⟨22 unchanged words⟩ , tide-setup, tide-solutions-architect","type":"string"},"part":{"description":"Which part to return when the document is delivered in several parts. Omit for part 1; the response says how many there are.","minimum":1,"type":"integer"},"section":{"description":"Return only the section(s) whose heading contains this text, e.g. 'AP-62' or 'T-26'. Use it when another document points you at one entry.","type":"string"}},"required":["name"],"type":"object"}
FIND AND FIX WHAT IS WRONG WITH A TIDE APP, IN ONE COMMAND. Returns the command that checks an app for the faults behind most broken logins and unprotected APIs. It REPAIRS the mechanical ones itself (re-copies the DPoP page byte-exact, corrects a wrong rewrite path, gitignores .env) and prints the exact fix for the rest, which YOU apply — do not pass the list to the user. Covers: DPoP page missing/stale/served without its headers, useDPoP passed as a JSX prop (silently OFF), createTideCloakProxy called without protectedRoutes (protects nothing), adapter without its embedded key, remote JWKS,…
START A NEW TIDE APP FROM A WORKING TEMPLATE. Returns the exact commands to copy a complete, building app — login, the DPoP page and its wiring, server-side token AND proof verification, and the realm bootstrap script — then install, bootstrap and check it. CALL THIS when building a new app, BEFORE writing any auth code: the code that most often goes wrong (provider config, DPoP, route and API protection) is then copied, not retyped. Pass `situation` and it picks the template; or name one. Not for adding Tide to an existing app.
Certificate recorded, valid to 2027-02-28
Authorization not required
First tool surface recorded: 20 tools (server version 1.9.23)
Showing the latest 4 events. The API returns up to 500 and filters by kind: ?kind=tool_surface_changed